All Apps and Add-ons

Exporting Data from Splunk into Excel

daniellim
Explorer

Hello Splunk Community, I have come across a task whereby I am required to export data from splunk into excel, through rest api etc.

The Splunk ODBC Driver is not supported on Splunk platform versions 7.x. Upgrading your Splunk platform to 7.x can cause breaking changes to the Splunk ODBC Driver.

As this option is not viable due to it being discontinued, I would like to find out other options besides using the ODBC driver.

After much searching, I think the closest solution is VBA.

So my question would be - Are there any simple templates or guides for VBA to do this?

I need to authenticate with splunk, pull data through rest, and lastly populate the excel cells.

Looking forward to suggestions. Thanks!

0 Karma

inventsekar
SplunkTrust
SplunkTrust

As said on the above answer, we can use outputcsv command to export the splunk events to a CSV file , then, which can be easily imported into excel.

Any splunk search results, report/alert/dashboard can be saved as CSV file, then imported to excel.

As you are a member here at splunk answers, just thought to update you that, you can upvote any answers/comments and if any answers resolved your query, please "accept that as the answer", so that question will move from unanswered queue to answered queue.

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

jgbricker
Contributor

Depending on your requirements this may not be an option but thoight I’d point out that there is an outputcsv command.

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Outputcsv

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...